Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/bb3d73-ca3f-4467-b6e8-702be48a551e/1/16krjicQkBMH9dqFSE5TJFKdy_4.roa
File: 16krjicQkBMH9dqFSE5TJFKdy_4.roa (raw, json)
Hash identifier: sjFyLwrdprAA21bRK+RR6f+LS4U3T1vdynk3Z4bxkXs=
Subject key identifier: D7:A9:2B:8E:27:10:90:13:07:F5:DA:85:48:4E:53:24:52:9D:CB:FE
Certificate issuer: /CN=ad52c28ef9a5b2291aba671ac9a65d8faadc5518
Certificate serial: 0188436B0B91BA44A3EEBA9CCFBE0CD98F52
Authority key identifier: AD:52:C2:8E:F9:A5:B2:29:1A:BA:67:1A:C9:A6:5D:8F:AA:DC:55:18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rVLCjvmlsikaumcayaZdj6rcVRg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/bb3d73-ca3f-4467-b6e8-702be48a551e/1/16krjicQkBMH9dqFSE5TJFKdy_4.roa
Signing time: Mon 22 May 2023 12:24:28 +0000
ROA not before: Mon 22 May 2023 12:24:28 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 57900
IP address blocks: 212.24.246.0/24 maxlen: 24
212.24.247.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:43:6b:0b:91:ba:44:a3:ee:ba:9c:cf:be:0c:d9:8f:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad52c28ef9a5b2291aba671ac9a65d8faadc5518
Validity
Not Before: May 22 12:24:28 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d7a92b8e2710901307f5da85484e5324529dcbfe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:92:69:b0:25:a2:dd:4e:de:c1:6f:fd:b3:e6:
bb:8f:b5:7a:85:b6:5a:55:ab:d5:fa:c0:ec:78:a1:
8a:f2:d4:76:05:c2:67:3f:1d:b7:67:76:76:b1:d7:
2a:81:90:e0:a3:ae:b2:0c:22:1e:43:25:4a:76:4e:
a8:7c:bc:47:3e:1f:33:72:0d:86:b7:13:d4:c0:a4:
c1:af:6f:05:ea:12:c5:b1:a4:c6:60:dd:8e:25:7b:
ac:94:76:00:20:f9:4e:05:2d:b0:c3:26:dd:7a:4e:
4a:41:18:2b:be:c8:2d:82:ae:1a:db:93:1d:a5:f3:
5d:ac:14:47:04:2d:cc:1e:ba:cf:cc:11:e9:14:92:
ab:5f:3b:fc:e6:74:ce:fd:90:f3:1f:3f:bb:01:12:
a4:54:fd:a7:ef:47:9a:cf:3a:50:11:e7:46:18:8b:
4b:ac:d3:a3:6c:8c:fe:9b:00:eb:8a:94:67:10:5a:
bf:83:ba:40:d7:0b:52:a2:0d:4c:5d:a8:f0:83:61:
2a:d1:b8:c9:1a:ab:1d:fc:44:b6:fa:6f:c3:6c:be:
df:d7:3e:29:eb:3e:bd:a6:be:21:b8:d8:62:87:52:
1d:4f:6e:ff:71:cb:f1:cd:14:e3:64:3f:01:14:79:
75:00:46:d1:5c:f7:12:85:ea:b2:65:8f:3e:94:2e:
02:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:A9:2B:8E:27:10:90:13:07:F5:DA:85:48:4E:53:24:52:9D:CB:FE
X509v3 Authority Key Identifier:
keyid:AD:52:C2:8E:F9:A5:B2:29:1A:BA:67:1A:C9:A6:5D:8F:AA:DC:55:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rVLCjvmlsikaumcayaZdj6rcVRg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/bb3d73-ca3f-4467-b6e8-702be48a551e/1/16krjicQkBMH9dqFSE5TJFKdy_4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/bb3d73-ca3f-4467-b6e8-702be48a551e/1/rVLCjvmlsikaumcayaZdj6rcVRg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.24.246.0/23
Signature Algorithm: sha256WithRSAEncryption
81:52:62:59:a0:73:b4:cc:26:dc:28:cf:94:8f:46:24:68:e1:
eb:55:c0:91:5d:8a:6d:31:4d:39:cb:74:4b:c7:70:1a:f5:01:
7e:84:e4:cb:fb:8b:08:5b:98:fb:fd:5e:bd:48:5c:4c:f2:6e:
84:96:a7:94:1d:23:dd:3d:dc:1f:38:4a:df:f3:db:13:0f:31:
2d:b6:f2:53:9c:3d:f2:db:37:26:c7:e7:e9:59:36:35:ec:e5:
50:5a:39:26:90:fc:55:ed:3a:d8:9a:d1:fe:0e:f0:52:4b:92:
1e:e9:bd:af:28:f0:08:8a:d9:50:ec:4f:35:4e:38:71:13:dd:
47:91:73:aa:dd:7b:0c:f3:7e:c2:a0:da:21:04:12:86:a3:9e:
75:ea:8b:63:b8:42:8e:0c:ce:e1:8e:8b:2d:8e:20:da:f5:14:
62:e3:e9:b7:e1:ab:65:40:bd:8e:a7:63:a2:e1:bf:22:9a:d3:
2a:29:44:da:88:2d:45:fc:e1:0a:a0:ef:3e:3d:4f:4e:7a:fc:
b3:59:fa:09:30:f8:83:4e:9b:44:8c:bf:02:5f:e6:e5:ca:51:
e7:39:98:e2:61:1b:d4:c4:60:9b:6f:f1:b2:c5:28:28:9c:aa:
6f:91:da:95:dc:2f:2e:8b:ec:4e:78:5e:67:85:c6:59:da:48:
18:1b:2f:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:41:13 2025 by rpki-client